IOC Radar
IPMediumSignal 67/100

185.222.58.54

Location
NetherlandsNetherlands
Amsterdam, North Holland
ASN
AS51447
RootLayer Web Services Ltd.
First Seen
Feb 20, 2024
Last Seen
Feb 19, 2026
Feb 20
First Seen
857d ago
Feb 19
Last Seen
127d ago
4
Reports
source reports
67%
Confidence
medium
Found in 4 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
67%
Signal Score
67 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

5 techniques

Network Information

CountryNLNetherlands
RegionAmsterdam, North Holland
ASNAS51447
OrganizationRootLayer Web Services Ltd.

Feed Intelligence Summary

4 reports67% confidence
4
Source reports
67%
Confidence score
Category tags
asiabangladeshdata encryptiondata exfiltrationdata store exposureencryptioneuropeexploitation activityextortionindicatorinjection activitymalicious softwaremalwarenetherlandsnetworknlprocess injectionransomwareresearchedsystem disruptiont1055t1071.001t1486t1490t1565tor node

Activity Timeline

1 total obs
Feb 19Feb 19

Threat Activity Heatmap

· Peak: 2026-02-19
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreMedium Risk
67
SIGNAL
Signal Score
67%
Confidence
4
Reports
First seenFeb 20, 2024
Last seenFeb 19, 2026
GeolocationNL
CountryNetherlands
LocationAmsterdam, North Holland
ASNAS51447
OrgRootLayer Web Services Ltd.
Coords52.3676, 4.9041

VirusTotal

Not checked

WHOIS

raw
inetnum: 185.222.58.0 - 185.222.58.255 netname: BD-ROOTLAYER-20180912 descr: RootLayer Web Services LTD. country: NL geoloc: 52.391286 4.6649074 language: NL language: EN admin-c: KBA20-RIPE tech-c: KBA20-RIPE status: ASSIGNED PA mnt-by: bd-rootlayer-1-mnt mnt-by: ROOTLAYERNET created: 2018-09-12T17:02:17Z last-modified: 2022-01-31T11:34:54Z source: RIPE person: K.M. Badrul Alam address: 651 N Broad St, Suite 206, Middletown address: 19709 address: Middletown address: United States phone: +1 (747) 236-3025 nic-hdl: KBA20-RIPE mnt-by: bd-rootlayer-1-mnt created: 2017-09-18T13:04:41Z last-modified: 2026-01-26T07:40:04Z source: RIPE route: 185.222.58.0/24 origin: AS51447 mnt-by: bd-rootlayer-1-mnt mnt-by: ROOTLAYERNET created: 2018-09-14T18:51:53Z last-modified: 2018-09-14T18:51:53Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 4 months ago
Appeared in 4 threat reports